2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Studio Hyperset Th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Data Dash

Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pa

A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 th

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Repl

The Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with re

Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service av

The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form-submission.js script in

The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. T

In PEAR HTTP_Request2 before 2.7.0, multiple files in the tests directory, notably tests/_network/getparameters.php and

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authenticatio

Overview   XML documents optionally contain a Document Type Definition (DTD), which, among other features, enable

Overview   XML documents optionally contain a Document Type Definition (DTD), which, among other features, enable

Overview   The software does not neutralize or incorrectly neutralize user-controllable input before it is placed

Overview   The product uses external input to construct a pathname that should be within a restricted directory,

Overview   The product uses external input to construct a pathname that should be within a restricted directory,

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users

Overview  The product specifies permissions for a security-critical resource in a way that allows that resource to be

Overview   The software does not neutralize or incorrectly neutralize user-controllable input before it is placed

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access

The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in t

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Str

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability a

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious

A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this r

Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Req

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-c

An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and

Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page: *.*.

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize: *.*.

Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator: *.*.

Vulnerability in Drupal Simple GTM.This issue affects Simple GTM: *.*.

Vulnerability in Drupal Panelizer (obsolete).This issue affects Panelizer (obsolete): *.*.

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal baguetteBox

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to vi

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generat

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_ge

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generat

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id paramet

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that c

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, re

A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating):

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Managemen

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Thi

In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currentl